> I myself had a hard time believing that these dropped packets would not influence
> the connections, but it turns out is really was correct after all.
>
> http://doc.m0n0.ch/handbook/faq-legit-traffic-dropped.html

Problem is, legitimate traffic *is* actually being blocked by this - I
can't access this particular host over the VPN and none of its traffic
is being let through.  It's all blocked, and it's all being logged as
blocked.
It's only this particular machine though which makes me think it's
sending out malformed packets in some way.

Tim